CVE-2017-9149 Metadata Anonymisation Toolkit (MAT) 0.6 and 0.6.1 silently fails to perform "Clean metadata" actions upon invocation from the Nautilus contextual menu, which allows context-dependent attackers to obt...
HighCVSS 7.5
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Metadata Anonymisation Toolkit (MAT) 0.6 and 0.6.1 silently fails to perform "Clean metadata" actions upon invocation from the Nautilus contextual menu, which allows context-dependent attackers to obtain sensitive information by reading a file for which cleaning had been attempted.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| metadata anonymisation toolkit project metadata anonymisation toolkit | = 0.6 | No fix listed |
| metadata anonymisation toolkit project metadata anonymisation toolkit | = 0.6.1 | No fix listed |
References
- 0xacab.org patch
- 0xacab.org patch
- 0xacab.org issue-tracking
- bugs.debian.org mailing-list